CVE-2025-23749
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Jan 16, 2025
CWE ID 352
Summary
CVE-2025-23749 is a newly disclosed vulnerability that impacts the Mahdi Khaksar mybb Last Topics software. The weakness combines both Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS) components. The CSRF vulnerability enables unauthorized command execution, while the Stored XSS issue allows attackers to inject malicious scripts into web pages viewed by other users. This defect affects mybb Last Topics versions from n/a through 1.0. Users are advised to upgrade or apply patches as soon as possible to mitigate these risks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.